Project BabyBanana is a next generation reflect token on Binance Smart Chain, designed to be a valuable asset to the Apeswap/Koala DeFi jungle ecosystem and also designed to be an easy stepping stone for beginning crypto investors to learn how to generate a passive income.
It is an all in one crypto currency tool for building up a diverse portfolio by buying BabyBanana tokens, holding them and staking the Banana/Gnana rewards on Apeswap.
The tokenomics are effective, easy to understand and profitable. By buying and holding BabyBanana tokens a holder will earn either Banana, Gnana or any other BSC token that team BabyBanana creates a NFT for. On the native platform Apeswap it is possible to stake those tokens in a staking pool of free choice to earn tokens of other Apeswap related projects for free. There are many different pools/tokens to choose from. Some of them are tokens from crypto gaming platforms so the holders are free to use them for this purpose if they would like to. On the website they offer games like ""the BabyBanana chess game"", that will be available in single- and multiplayer mode.
There is a fictional island called Libbyria that serves as the UI on our website and is used as the interface to all BabyBanana utilities/community activities. There are numerous different NFT designs that have unique utilities, have highly collectible and exclusive elements and will also be able to generate passive income through staking.
To add an unique factor to the project the NFT designs impersonate fictional characters that live on the earlier mentioned island of Libbyria. Seventeen of those NFTs will be limited edition and 9 will be unlimited. When they are sold out they will be tradable on the aftermarket. There will be 5 tiers of rarity. Some NFTs will be available in unlimited amounts. To prevent holders from stacking NFTs and creating bonusses that will disturb the reward system's balance NFTs are limited to 1 NFT per wallet. If holders want to display their NFT instead of keeping it in their wallet they can put it in our NFT museum. These holders will be rewarded Gnana tokens that are bought from a portion of the NFT revenue and from the reflection rewards that the NFT museum reward wallet generates from owning 1.5% of the BabyBanana token supply.
Apart from the possibilities that BabyBanana gives its holders, the project ensured a transparent and trustable security standard. This was done by an audit from Paladin blockchain security and by locking liquidity for 365 days to provide holders with a peace of mind that the token can always be traded.
Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
Reentrancy in BabyBanana.triggerBuyback(uint256) (BabyBanana.sol#441-449):
External calls:
- buyTokens(amount,DEAD) (BabyBanana.sol#445)
- ROUTER.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (BabyBanana.sol#343-348)
State variables written after the call(s):
- lastMarketingBuyback = block.timestamp (BabyBanana.sol#446)
Apply the check-effects-interactions pattern.
Additional information: link
DividendDistributor.distributeGnana(uint256,address) (DividendDistributor.sol#243-255) ignores return value by GNANA.transfer(shareholder,gnanaAmount) (DividendDistributor.sol#252)
Use SafeERC20, or ensure that the transfer/transferFrom return value is checked.
Additional information: link
Combination 3: Reentrancy vulnerabilities + Unchecked transfer vulnerability. Usual for scams. May be justified by some complex mechanics (e.g. rebase, reflections). DYOR & manual audit are advised.
Reentrancy in DividendDistributor.setShare(address,uint256) (DividendDistributor.sol#104-132):
External calls:
- distributeDividend(shareholder) (DividendDistributor.sol#106)
- BANANA.approve(address(treasury),bananaAmount) (DividendDistributor.sol#244)
- BANANA.approve(address(ROUTER),bananaAmount) (DividendDistributor.sol#263)
- treasury.buy(bananaAmount) (DividendDistributor.sol#248-254)
- ROUTER.swapExactTokensForTokensSupportingFeeOnTransferTokens(bananaAmount,0,path,shareholder,block.timestamp) (DividendDistributor.sol#266-274)
- GNANA.transfer(shareholder,gnanaAmount) (DividendDistributor.sol#252)
- BANANA.transfer(shareholder,amount) (DividendDistributor.sol#226)
State variables written after the call(s):
- shares[shareholder].amount = boostedAmount (DividendDistributor.sol#128)
- shares[shareholder].totalExcluded = getCumulativeDividends(shares[shareholder].amount) (DividendDistributor.sol#129)
Apply the check-effects-interactions pattern.
Additional information: link
BabyBanana.swapBack() (BabyBanana.sol#300-321) ignores return value by address(MARKETING_WALLET).call{gas: _marketingTransferGas,value: amountBNBMarketing}() (BabyBanana.sol#320)
Ensure that the return value of a low-level call is checked or logged.
Additional information: link
DividendDistributor.process().avgGasCost (DividendDistributor.sol#164) is a local variable never initialized
Initialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.
Additional information: link
DividendDistributor.distributeReward(address,address,uint256,address) (DividendDistributor.sol#257-275) ignores return value by BANANA.approve(address(ROUTER),bananaAmount) (DividendDistributor.sol#263)
Ensure that all the return values of the function calls are used.
Additional information: link
Variable 'DividendDistributor.rewardTokenFor(address).pair (DividendDistributor.sol#236)' in DividendDistributor.rewardTokenFor(address) (DividendDistributor.sol#235-241) potentially used before declaration: (tokenAddress,pair) (DividendDistributor.sol#237)
Move all variable declarations prior to any usage of the variable, and ensure that reaching a variable declaration does not depend on some conditional if it is used unconditionally.
Additional information: link
Reentrancy in BabyBanana.triggerAutoBuyback() (BabyBanana.sol#331-336):
External calls:
- buyTokens(autoBuybackAmount,DEAD) (BabyBanana.sol#332)
- ROUTER.swapExactETHForTokensSupportingFeeOnTransferTokens{value: amount}(0,path,to,block.timestamp) (BabyBanana.sol#343-348)
State variables written after the call(s):
- autoBuybackAccumulator += autoBuybackAmount (BabyBanana.sol#334)
- autoBuybackBlockLast = block.number (BabyBanana.sol#333)
- autoBuybackEnabled = false (BabyBanana.sol#335)
Apply the check-effects-interactions pattern.
Additional information: link
Reentrancy in BabyBanana.triggerSwapBack() (BabyBanana.sol#451-454):
External calls:
- swapBack() (BabyBanana.sol#452)
- ROUTER.swapExactTokensForETHSupportingFeeOnTransferTokens(swapThreshold,0,path,address(this),block.timestamp) (BabyBanana.sol#307-313)
- distributor.deposit{value: amountBNBRewards}() (BabyBanana.sol#319)
- address(MARKETING_WALLET).call{gas: _marketingTransferGas,value: amountBNBMarketing}() (BabyBanana.sol#320)
External calls sending eth:
- swapBack() (BabyBanana.sol#452)
- distributor.deposit{value: amountBNBRewards}() (BabyBanana.sol#319)
- address(MARKETING_WALLET).call{gas: _marketingTransferGas,value: amountBNBMarketing}() (BabyBanana.sol#320)
Event emitted after the call(s):
- TriggerSwapBack() (BabyBanana.sol#453)
Apply the check-effects-interactions pattern.
Additional information: link
DividendDistributor.updateTreasury(address) (DividendDistributor.sol#317-322) uses timestamp for comparisons
Dangerous comparisons:
- require(bool,string)(_deployedAt + treasuryTimelock <= block.timestamp,Function is time locked) (DividendDistributor.sol#318)
Avoid relying on block.timestamp.
Additional information: link
DividendDistributor.process() (DividendDistributor.sol#157-184) has costly operations inside a loop:
- currentIndex ++ (DividendDistributor.sol#178)
Use a local variable to hold the loop computation result.
Additional information: link
solc-0.8.9 is not recommended for deployment
Deploy with any of the following Solidity versions: 0.5.16 - 0.5.17, 0.6.11 - 0.6.12, 0.7.5 - 0.7.6 Use a simple pragma version that allows any of these versions. Consider using the latest version of Solidity for testing.
Additional information: link
Low level call in BabyBanana.swapBack() (BabyBanana.sol#300-321):
- address(MARKETING_WALLET).call{gas: _marketingTransferGas,value: amountBNBMarketing}() (BabyBanana.sol#320)
Avoid low-level calls. Check the call success. If the call is meant for a contract, check for code existence
Additional information: link
Function IApeRouter.WETH() (IApe.sol#15) is not in mixedCase
Follow the Solidity naming convention.
Additional information: link
DividendDistributor.slitherConstructorVariables() (DividendDistributor.sol#10-338) uses literals with too many digits:
- gasLimit = 500000 (DividendDistributor.sol#46)
Use: Ether suffix, Time suffix, or The scientific notation
Additional information: link
DividendDistributor.dividendsPerShareAccuracyFactor (DividendDistributor.sol#44) should be constant
Add the constant attributes to state variables that never change.
Additional information: link
balanceOf(address) should be declared external:
- BabyBanana.balanceOf(address) (BabyBanana.sol#129)
Use the external attribute for functions never called from the contract.
Additional information: link
BscScan page for the token does not contain additional info: website, socials, description, etc.
Additional information: link
Unable to find token contract audit
Unable to find audit link on the website
Unable to find whitepaper link on the website
Unable to find token on CoinHunt
Additional information: link
Young tokens have high risks of price dump / death
Young tokens have high risks of scam / price dump / death
Young tokens have high risks of scam / price dump / death
Young tokens have high risks of price dump / death
Token has relatively low CoinGecko rank
Token has relatively low CoinMarketCap rank
Twitter account link seems to be invalid
Unable to find Youtube account